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LIST OF CURRENT CLAIMS 

L (Currently Amended) A method for effecting a secure electronic transaction on a 
terminal using a portable data carrier arranged to perform different quality user authentication 
methods, wherein the portable data carrier performs a user authentication using one of said 
different user authentication methods, the portable data carrier confirms the proof of 
authentication to the terminal, and the portable data carrier then performs a security- 
establishing operation within the electronic transaction, comprising the steps of creating 
authentication quality information by the portable data carrier about said how the 
authentication of the -- u ae r was performed, by the us e d user authentication method used and 
attaching said authentication quality information i-s^attaehed to the result of the security- 
establishing operation , wherein the difference in quality of user authentication varies between 
an inherently relatively lower quality and an inherently relative l y higher quality from a 
security perspective . 

2. (Previously Presented) The method according to claim 1, wherein the security- 
establishing operation performed by the portable data carrier comprises creating a digital 
signature. 

3. (Previously Presented) The method according to claim 1, wherein the 
authentication of the user is performed by presentation of a biometric feature. 

4. (Previously Presented) The method according to claim 3, wherein the 
authentication of the user is performed by presentation of a physiological or behavior-based 
feature characteristic of a user, 

5. (Previously Presented) The method according to claim 1, wherein the 
authentication of the user is performed by proof of knowledge of a secret. 

6. (Previously Presented) The method according to claim 1, wherein at least two 
different authentication methods of different quality are offered for authentication of the user. 

7. (Previously Presented) The method according to claim 6, wherein the particular 
authentication methods not used are disabled. 
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8, (Previously Presented) The method according to claim 6, wherein no quality 
information is produced for an authentication method. 

9 + (Previously Presented) The method according to claim 1, wherein a user is asked to 
select an authentication method. 

10. (Currently Amended) A portable data carrier for performing a security- 
establishing operation within a secure electronic transaction and arranged to perform different 
quality user authentication methods , wherein the difference in quality of user authentication 
varies between an inherently relatively lower quality and an inherently relatively higher 
quality from a security perspective , whereby the portable data carrier is arranged to perform a 
user authentication using one of said implemented user authentication methods and the 
portable data carrier is arranged to confirm the authentication to a terminal, and wherein the 
data carrier is arranged to create quality information about said stating how th e authentication 
of4he-u ser was performed by the used user authentication method used and to attach such 
quality information to the result of the security establishing op eration. 

1 1 . (Previously Presented) The data carrier according to claim 10, wherein the 
portable data carrier is set up to create a digital signature. 

12. (Previously Presented) The data carrier according to claim 10, wherein the data 
carrier supports at least two qualitatively different authentication methods, 

13. (Currently Amended) A terminal for use in connection with [[a]] the portable data 
carrier according to claim 9, said terminal including a device arranged to cause a user to 
select one of at least two possible different quality authentication methods. 

14. (Currently Amended) A system for effecting a secure electronic transaction within 
which the quality of authentication of a user of the system is ascertained, comprising [[a]] the 
portable data carrier according to claim 10 and [[a]] the terminal according to claim 13. 
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